$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142317.roa File: AS142317.roa (raw, json) Hash identifier: x8G2XBnEttANkDTkg/dPBGYIb3Wi+cdxmqFLv4q9jx4= Subject key identifier: F4:4C:C6:97:FA:5B:BE:21:6B:D9:3D:A9:F2:68:A8:82:3F:24:8F:9A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 42255E71309513E8B47E3B220678FDC6598C6A7F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142317.roa Signing time: Tue 10 Dec 2024 05:00:25 +0000 ROA not before: Tue 10 Dec 2024 04:55:25 +0000 ROA not after: Tue 09 Dec 2025 05:00:25 +0000 asID: 142317 IP address blocks: 103.168.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:25:5e:71:30:95:13:e8:b4:7e:3b:22:06:78:fd:c6:59:8c:6a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:25 2024 GMT Not After : Dec 9 05:00:25 2025 GMT Subject: CN=F44CC697FA5BBE216BD93DA9F268A8823F248F9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:09:03:92:bb:f6:39:a5:bb:bb:94:7b:d7:56: b1:88:44:9e:77:98:37:dd:83:a4:01:0c:bf:b5:60: a0:2a:a3:2a:dc:26:31:19:32:c3:73:05:0c:48:56: c7:b3:37:17:e4:7a:a0:1d:de:d5:a5:79:0d:44:1c: 07:e0:c3:84:91:dc:68:d6:69:5b:41:fe:2e:74:59: 21:70:11:e5:41:a5:4f:0f:a0:c9:ac:32:02:6d:a0: 26:98:c5:3a:20:a5:61:e4:41:d5:fb:fa:11:43:36: 5a:1a:f1:fa:e7:99:67:c8:f5:57:22:25:d3:0a:5c: 8f:c5:2f:5b:c3:17:48:60:0b:66:aa:4d:bf:20:53: f0:a1:a7:34:f0:4b:b8:27:46:64:8a:9b:c2:31:57: e4:9d:0f:58:43:55:df:74:25:16:ae:d5:5a:52:57: bb:b1:09:9d:6c:70:ca:60:be:e0:25:de:29:13:1b: 01:56:3a:8f:b0:af:75:1f:43:e5:e5:fe:54:33:a9: 73:a3:0a:b7:1d:68:99:ce:00:54:96:a3:f7:78:82: d0:8d:d0:d7:7c:66:c4:11:fc:f2:9d:d1:09:93:1d: 53:5a:1e:05:a3:86:9d:5a:5d:e2:ff:3e:d3:e0:0b: 23:fe:35:0b:79:75:b9:7a:55:c3:f4:9d:db:2c:ef: 75:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4C:C6:97:FA:5B:BE:21:6B:D9:3D:A9:F2:68:A8:82:3F:24:8F:9A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142317.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.158.0/23 Signature Algorithm: sha256WithRSAEncryption 25:d6:fa:c4:b9:d3:34:e4:5b:ca:b9:b5:39:f2:5a:7c:a7:bc: 43:84:76:d4:9d:07:e4:39:4e:aa:31:c1:69:73:ae:23:9d:42: 7d:20:eb:cd:bb:eb:86:6b:20:a2:c6:b8:37:28:92:b7:46:22: a9:5e:a2:26:a2:df:6d:c3:59:8c:85:7a:fc:c6:97:18:0c:31: b7:e4:ba:1f:d2:95:53:eb:b7:df:74:21:57:87:af:35:35:dc: a4:56:61:de:76:c3:f2:97:15:18:e1:6d:21:86:b1:82:c2:7c: 98:db:7d:32:49:89:cb:4b:ee:49:b8:9f:84:dd:92:6e:5f:dc: e1:ac:c5:d6:41:15:54:68:83:c1:16:08:68:bd:c8:6c:4c:3b: 76:91:18:41:8c:7c:be:a9:6d:ae:a8:b2:f7:6f:02:ef:4d:80: f6:0e:b5:fd:3d:63:cf:48:8b:0a:55:14:e0:72:15:8f:42:b9: a0:95:02:44:c4:51:7e:6f:27:cc:8a:fa:0c:d1:b5:e4:6a:36: 6c:fb:32:70:8f:6b:0f:d6:e3:44:fb:f1:21:fc:2d:34:da:02: c2:af:95:62:8d:8a:fb:4d:66:05:8e:52:64:83:c2:05:d0:af: 53:8f:d6:99:f8:20:24:3c:e6:dd:ad:4f:98:78:d9:03:51:34: af:da:11:d7 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUQiVecTCVE+i0fjsiBnj9xlmMan8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUyNVoX DTI1MTIwOTA1MDAyNVowMzExMC8GA1UEAxMoRjQ0Q0M2OTdGQTVCQkUyMTZCRDkz REE5RjI2OEE4ODIzRjI0OEY5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIJA5K79jmlu7uUe9dWsYhEnneYN92DpAEMv7VgoCqjKtwmMRkyw3MFDEhW x7M3F+R6oB3e1aV5DUQcB+DDhJHcaNZpW0H+LnRZIXAR5UGlTw+gyawyAm2gJpjF OiClYeRB1fv6EUM2Whrx+ueZZ8j1VyIl0wpcj8UvW8MXSGALZqpNvyBT8KGnNPBL uCdGZIqbwjFX5J0PWENV33QlFq7VWlJXu7EJnWxwymC+4CXeKRMbAVY6j7CvdR9D 5eX+VDOpc6MKtx1omc4AVJaj93iC0I3Q13xmxBH88p3RCZMdU1oeBaOGnVpd4v8+ 0+ALI/41C3l1uXpVw/Sd2yzvdZMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT0TMaX +lu+IWvZPanyaKiCPySPmjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMxNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeonjANBgkqhkiG9w0BAQsFAAOCAQEAJdb6xLnTNORbyrm1OfJa fKe8Q4R21J0H5DlOqjHBaXOuI51CfSDrzbvrhmsgosa4NyiSt0YiqV6iJqLfbcNZ jIV6/MaXGAwxt+S6H9KVU+u333QhV4evNTXcpFZh3nbD8pcVGOFtIYaxgsJ8mNt9 MkmJy0vuSbifhN2Sbl/c4azF1kEVVGiDwRYIaL3IbEw7dpEYQYx8vqltrqiy928C 702A9g61/T1jz0iLClUU4HIVj0K5oJUCRMRRfm8nzIr6DNG15Go2bPsycI9rD9bj RPvxIfwtNNoCwq+VYo2K+01mBY5SZIPCBdCvU4/WmfggJDzm3a1PmHjZA1E0r9oR 1w== -----END CERTIFICATE-----Generated at Sat Apr 5 06:22:52 2025 by rpki-client